EDA design collaboration data security protection system, method and electronic device

Abstract

The application provides an EDA design cooperation data security protection system and method and electronic equipment, and relates to the technical field of electronic design.The system comprises a user layer, an application layer and a cloud platform layer.The user layer sets the data access strategy and access authority of a participant through a user interface.The application layer comprises an EDA tool and a data processing module.The EDA tool is used for executing an EDA design task and sending the design data of the EDA design task to the data processing module.The data processing module is used for performing data segmentation, data preprocessing, data encryption, data decryption and data reconstruction on the design data and returning the processed design data to the EDA tool.The cloud platform layer is used for executing the calculation task of the EDA design task based on a secure multi-party calculation protocol and sending the encrypted calculation result to the data processing module.The application ensures the security of the design data and improves the design efficiency.

Description

Technical Field

[0001] This invention relates to the field of electronic design technology, and in particular to an EDA design collaborative data security protection system, method, and electronic device. Background Technology

[0002] In EDA (Electronic Design Automation) processes, multiple design teams or designers need to collaborate to complete complex electronic design tasks. However, due to the high sensitivity and confidentiality of EDA design data, ensuring data security and privacy during collaboration has become a pressing issue. Traditional data security methods, such as data encryption and access control, while offering some protection, still pose a risk of data leakage in collaborative environments and may impact design efficiency. Summary of the Invention

[0003] In view of this, the purpose of the present invention is to provide an EDA design collaboration data security protection system, method and electronic device, which ensures the security of design data and improves design efficiency.

[0004] To achieve the above objectives, the technical solution adopted by the present invention is as follows:

[0005] In a first aspect, the present invention provides an EDA design collaboration data security protection system, comprising: a user layer, an application layer, and a cloud platform layer; the user layer sets data access policies and access permissions for participating parties through a user interface; the application layer includes: an EDA tool and a data processing module, wherein the EDA tool is used to execute EDA design tasks and send the design data of the EDA design tasks to the data processing module; the data processing module is used to perform data segmentation, data preprocessing, data encryption, data decryption, and data reconstruction on the design data, and returns the processed design data to the EDA tool; the cloud platform layer is used to execute the computation tasks of the EDA design tasks based on a secure multi-party computation protocol and send the encrypted computation results to the data processing module.

[0006] Optionally, the data processing module includes: a data segmentation component, used to acquire design data for EDA design tasks, segment the design data, and distribute it to the corresponding participants; a data preprocessing component, used to preprocess the segmented design data; a data encryption component, used to encrypt the preprocessed design data to obtain encrypted data for each participant, and transmit the encrypted data to the cloud platform executing the computation task based on the SSL communication protocol, and receive the encrypted computation results of each participant transmitted by the cloud platform through the SSL communication protocol; a data decryption component, used to decrypt the encrypted computation results of each participant to obtain the computation results of each participant; and a data reconstruction component, used to verify the computation results of each participant, and after successful verification, integrate the design data of each participant to obtain the design database.

[0007] Optionally, the data encryption component is specifically used to: generate public and private key pairs based on a preset key generation algorithm; encrypt the preprocessed design data based on the public key pairs to obtain encrypted data for each participant, and allocate the share of the private key to the corresponding participant.

[0008] Optionally, the data decryption component is specifically used to: obtain the private key share of each participant and combine the private key shares of each participant; decrypt the encrypted calculation result based on the combined private key share to obtain the calculation result of each participant.

[0009] Optionally, the data reconstruction component is specifically used to: verify the calculation results of each participant based on the digital signature verification algorithm; if the calculation results of each participant meet the design requirements, then uniformly format and integrate the design data of each participant to obtain the design database.

[0010] Optionally, the cloud platform layer includes: a cloud computing resource and a security management module; the cloud computing resource is used to receive and store encrypted data transmitted by the data processing module, and to perform joint computation on the encrypted data of each participant based on a secure multi-party computation protocol to obtain the encrypted computation results of each participant, and to transmit the encrypted computation results to the corresponding participants through the communication SSL protocol; the security management module is used for key management, access control of each participant, and security auditing.

[0011] Secondly, the present invention provides an EDA design collaboration data security protection method, applied to the EDA design collaboration data security protection system provided in any of the first aspects, comprising: acquiring design data of an EDA design task, and dividing the design data and distributing it to the corresponding participants; preprocessing the divided design data, and encrypting the preprocessed design data to obtain encrypted data of each participant; jointly calculating the encrypted data of each participant based on a secure multi-party computation protocol to obtain the encrypted calculation results of each participant; decrypting the encrypted calculation results of each participant to obtain the calculation results of each participant; verifying the calculation results of each participant, and after successful verification, integrating the design data of each participant to obtain a design database.

[0012] Optionally, the encrypted calculation results of each participant are decrypted to obtain the calculation results of each participant, including: obtaining the private key share of each participant and combining the private key shares of each participant; and decrypting the encrypted calculation results based on the combined private key shares to obtain the calculation results of each participant.

[0013] Thirdly, the present invention provides an electronic device including a processor and a memory, the memory storing computer-executable instructions executable by the processor, the processor executing the computer-executable instructions to implement the steps of the method provided in any of the first aspects above.

[0014] Fourthly, the present invention provides a computer-readable storage medium storing a computer program, wherein the computer program, when executed by a processor, performs the steps of the method provided in any of the first aspects above.

[0015] This invention brings the following beneficial effects:

[0016] The EDA design collaboration data security protection system, method, and electronic device provided by this invention include: a user layer, an application layer, and a cloud platform layer. The user layer allows participants to set data access policies and access permissions through a user interface. The application layer includes an EDA tool and a data processing module. The EDA tool executes EDA design tasks and sends the design data of the EDA design tasks to the data processing module. The data processing module performs data segmentation, data preprocessing, data encryption, data decryption, and data reconstruction on the design data and returns the processed design data to the EDA tool. The cloud platform layer executes the computation tasks of the EDA design tasks based on a secure multi-party computation protocol and sends the encrypted computation results to the data processing module. By segmenting EDA design data into multiple parts and employing a secure multi-party computation protocol, the system enables participating parties (design teams or designers) to perform collaborative computations without disclosing their respective data, thus protecting the security of design data and improving design efficiency.

[0017] Other features and advantages of the invention will be set forth in the description which follows, and will be apparent in part from the description, or may be learned by practicing the invention. The objects and other advantages of the invention are realized and obtained in accordance with the structures particularly pointed out in the description, claims and drawings.

[0018] To make the above-mentioned objects, features and advantages of the present invention more apparent and understandable, preferred embodiments are described below in detail with reference to the accompanying drawings. Attached Figure Description

[0019] To more clearly illustrate the specific embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the specific embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For those skilled in the art, other drawings can be obtained from these drawings without creative effort.

[0020] Figure 1 An architecture diagram of an EDA design collaboration data security protection system provided in an embodiment of the present invention;

[0021] Figure 2 A flowchart of an EDA design collaboration method provided in an embodiment of the present invention;

[0022] Figure 3 A flowchart illustrating an EDA design collaboration data security protection method provided in this embodiment of the invention;

[0023] Figure 4 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present invention. Detailed Implementation

[0024] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0025] Currently, traditional data security methods, such as data encryption and access control, can protect data security to a certain extent, but they still pose a risk of data leakage in collaborative environments and may affect design efficiency.

[0026] Based on this, the present invention provides an EDA design collaboration data security protection system, method and electronic device, which can ensure the security of design data and improve design efficiency.

[0027] To facilitate understanding of this embodiment, a detailed description of an EDA design collaboration data security protection system disclosed in this embodiment of the invention will be provided first. (See [link to relevant documentation]). Figure 1 The diagram shown illustrates the architecture of an EDA collaborative data security protection system, which mainly includes a user layer, an application layer, and a cloud platform layer.

[0028] The user layer sets data access policies and access permissions for stakeholders (design teams or designers) through the user interface (UI).

[0029] The application layer includes EDA tools and a data processing module. EDA tools execute EDA design tasks and send the design data to the data processing module. In practice, EDA tools perform specific electronic design tasks, such as schematic drawing, PCB layout, and circuit simulation. During these tasks, EDA tools need to interact with the data processing module. The EDA tools send design data to the data processing module for processing and receive the processed design data to continue the design task.

[0030] The data processing module is used to perform data segmentation, preprocessing, encryption, decryption, and reconstruction on the design data, and then return the processed design data to the EDA tool. In practice, the data processing module is responsible for operations such as data segmentation, preprocessing, encryption, decryption, and reconstruction to ensure data security and integrity.

[0031] The cloud platform layer is used to execute computational tasks for EDA design tasks based on a secure multi-party computation protocol and sends the encrypted computation results to the data processing module. In practice, the data processing module sends the encrypted data to the cloud platform layer for computation and storage, and receives the encrypted computation results and other necessary data from the cloud platform layer.

[0032] The EDA design collaboration data security protection system provided by this invention divides EDA design data into multiple parts and adopts a secure multi-party computation protocol to enable each participant (design team or designer) to perform joint calculations without disclosing their respective data. This not only protects the security of design data but also improves design efficiency.

[0033] In one implementation, the data processing module includes: a data segmentation component, a data preprocessing component, a data encryption component, a data decryption component, and a data reconstruction component.

[0034] The data segmentation component is used to acquire design data for EDA design tasks, segment the design data, and distribute it to the corresponding participants.

[0035] In practice, the design data is finely segmented according to functional modules (such as power modules, signal processing modules, control modules, etc.) and levels (such as behavioral level, logic level, circuit level, and physical level). The segmented design data is then assigned to corresponding participants, meaning each participant only receives and processes the data they are responsible for. Simultaneously, the data for each module and level is tagged and stored in different encrypted containers through a collaborative platform management UI.

[0036] The data preprocessing component is used to preprocess the segmented design data. In practice, each participant can preprocess the design data locally, such as encoding and encryption, to ensure the security of the original data.

[0037] The data encryption component is used to encrypt the preprocessed design data to obtain encrypted data from each participant, transmit the encrypted data to the cloud platform that performs the computing task based on the SSL communication protocol, and receive the encrypted computing results from each participant transmitted by the cloud platform through the SSL communication protocol.

[0038] In one implementation, the data encryption component is specifically used to: generate a public key and a private key pair based on a preset key generation algorithm; encrypt the preprocessed design data based on the public key pair to obtain encrypted data for each participant, and allocate the share of the private key to the corresponding participant.

[0039] In practical implementation, an intelligent key management system is used to generate public and private key pairs using a secure key generation algorithm (such as AES-GCM). The public key is used to encrypt data, and a share of the private key is distributed to each participant. Specifically, a secure communication protocol (such as TLS / SSL) can be used to distribute the private key to the corresponding participant, ensuring the security of the key during transmission. In this embodiment of the invention, each participant can only receive their own share of the private key, and the original data cannot be recovered.

[0040] Furthermore, after data encryption, the encrypted data can be transmitted to the cloud platform that performs the computing task using the SSL communication protocol, and the encrypted computing results of each participant can be received from the cloud platform via the SSL communication protocol.

[0041] The data decryption component is used to decrypt the encrypted calculation results of each participant to obtain the calculation results of each participant.

[0042] In one implementation, during data decryption, the private key shares of each participant are first obtained and combined; then, the encrypted calculation result is decrypted based on the combined private key shares to obtain the calculation result of each participant.

[0043] In practical implementation, the participating parties prepare for the decryption operation, ensuring that all necessary private key shares are available for the decryption process. This embodiment of the invention employs an interactive decryption method, where participating parties collaborate to decrypt the encrypted calculation result through an interactive process. During decryption, all participating parties need to provide their private key shares to ensure that only through the cooperation of all participating parties can the correct result be decrypted. Specifically, this includes:

[0044] (1) Collection of private key shares: When it is necessary to decrypt the encrypted calculation result, each participant needs to provide their own private key share to ensure the cooperation of all participants.

[0045] (2) Private key share combination: The private key shares of each participant are combined through a secure interactive process. The combination process requires that a sufficient number of private key shares be available for successful decryption.

[0046] (3) Data decryption: After the private key shares are successfully combined, the complete private key can be used to decrypt the encrypted data to obtain the original data, i.e. the original calculation result.

[0047] The data reconstruction component is used to verify the calculation results of each participant, and after verification, integrates the design data of each participant to obtain the design database.

[0048] In one implementation, during data reconstruction, the calculation results of each participant are first verified based on a digital signature verification algorithm; if the calculation results of each participant meet the design requirements, the design data of each participant are uniformly formatted and integrated to obtain the design database.

[0049] In practice, after obtaining the calculation results from each participant, result verification and data reconstruction are necessary to ensure the correctness of the results and the integrity of the data. Specifically, a digital signature verification algorithm is used to verify the calculation results, ensuring that all calculation results meet the design requirements and expected results. Once the calculation results from all participants have passed verification, the design data from each participant are integrated together. This includes uniformly formatting and organizing the circuit components, layout information, simulation data, etc., provided by different participants, to form a complete and consistent EDA design database or file set. This data will be used for subsequent circuit manufacturing, testing, or further simulation analysis.

[0050] In one implementation, the cloud platform layer includes a cloud computing resource and security management module.

[0051] Cloud computing resources are used to receive and store encrypted data transmitted by the data processing module, and to perform joint computation on the encrypted data of each participant based on a secure multi-party computation protocol to obtain the encrypted computation results of each participant, and to transmit the encrypted computation results to the corresponding participants through the communication SSL protocol.

[0052] In practice, cloud computing resources execute EDA computation tasks and work in conjunction with the security management module to ensure data security. The interaction between cloud computing resources and the security management module ensures the secure execution of computation tasks and the protection of data.

[0053] Specifically, in EDA design collaboration, rapid computation is a critical requirement. Therefore, choosing a computationally efficient Secure Multi-Party Computation (SMPC) protocol is particularly important. In this embodiment of the invention, a threshold fully homomorphic encryption (FHE) protocol can be used, which allows computation directly on encrypted data without decryption, thereby improving computational efficiency.

[0054] Specifically, in this embodiment of the invention, when using a threshold fully homomorphic encryption protocol for EDA computation tasks, a lightweight encryption algorithm (such as AES-GCM) is employed to encrypt and protect the data during data transmission and computation, ensuring that the data remains encrypted even during transmission. The encrypted data is then transmitted to the server or platform (i.e., cloud computing resources) performing the computation via the secure communication SSL protocol.

[0055] Participants send encrypted data to a cloud server or other entity performing computation. The cloud server or other entity receives the encrypted data and begins executing the necessary EDA computation tasks. Due to the use of threshold fully homomorphic encryption, the cloud server or other entity can perform computations directly on the encrypted data without decrypting the original data. After the computation is complete, the cloud server or other entity generates the computation results and stores these results in encrypted form. The encrypted computation results are then sent back to the participants via the secure SSL protocol.

[0056] The security management module is used for key management, access control for each participant, and security auditing.

[0057] In practice, the security management module is responsible for functions such as key management, access control, and security auditing to ensure the security of data on the cloud platform.

[0058] In this embodiment of the invention, through the communication and interaction between the modules, the system can efficiently execute electronic design tasks while ensuring data security and integrity. Each module has a specific function and works in conjunction with other modules to achieve the overall system functionality. This modular design makes the system easier to maintain, expand, and upgrade.

[0059] For ease of understanding, this invention also provides an EDA design collaboration method, see [link to relevant documentation]. Figure 2 As shown, it mainly includes the following steps 1 to 5:

[0060] Step 1: Data splitting.

[0061] In practice, EDA design data is finely segmented according to functional modules (such as power modules, signal processing modules, control modules, etc.) and levels (such as behavioral level, logic level, circuit level and physical level).

[0062] Step 2: Data allocation and preprocessing.

[0063] In practice, each team or designer only receives and processes the data they are responsible for after it has been segmented. Each team performs local preprocessing on the data, such as encoding and encryption, to ensure the security of the original data.

[0064] Step 3: Key generation and distribution.

[0065] In practice, a smart key management system is used to generate public and private key pairs through a secure key generation algorithm. The public key is used to encrypt data, and a share of the private key is distributed to each participant. Secure communication protocols such as SSL and encryption technology are employed to ensure the security of the keys during transmission.

[0066] Step 4: Joint calculation.

[0067] In practice, a threshold fully homomorphic encryption protocol is used for EDA computation tasks. The specific process is described in the aforementioned embodiments and will not be repeated here.

[0068] Step 5: Result verification and data reconstruction.

[0069] In practice, after obtaining the calculation results from each team, a digital signature verification algorithm is used to verify the results, ensuring that all results meet the design requirements and expectations. Once all teams' calculation results have been verified, these data are integrated to form a complete and consistent EDA design database or file set.

[0070] The system provided in this invention, by dividing EDA design data into multiple parts and employing SMPC technology, enables design teams or designers to perform collaborative calculations without disclosing their individual data. This not only protects the security of design data but also improves design efficiency. Furthermore, specific verification algorithms are used to validate the calculation results, ensuring their correctness and reliability. Finally, after all design teams or designers have completed their tasks, the system reconstructs the complete EDA design data based on the calculation results from all parties and further optimizes it to ensure the quality and performance of the design.

[0071] This invention also provides a method for protecting EDA design collaboration data security. This method is applied to the EDA design collaboration data security protection system provided in the foregoing embodiments. See [link to relevant documentation]. Figure 3 The flowchart shown illustrates a method for ensuring data security in EDA design collaboration, which mainly includes the following steps S301 to S305:

[0072] Step S301: Obtain the design data for the EDA design task, and then divide the design data and distribute it to the corresponding participants.

[0073] Step S302: Preprocess the segmented design data and encrypt the preprocessed design data to obtain encrypted data for each participant.

[0074] Step S303: Perform joint computation on the encrypted data of each participant based on the secure multi-party computation protocol to obtain the encrypted computation results of each participant.

[0075] Step S304: Decrypt the encrypted calculation results of each participant to obtain the calculation results of each participant.

[0076] Step S305: Verify the calculation results of each participant, and after verification, integrate the design data of each participant to obtain the design database.

[0077] The EDA design collaboration data security protection method provided by the present invention divides the EDA design data into multiple parts and adopts a secure multi-party computation protocol to enable each participant (design team or designer) to perform joint calculations without disclosing their respective data. This not only protects the security of the design data but also improves design efficiency.

[0078] In one implementation, when decrypting the encrypted calculation results of each participant to obtain the calculation results of each participant, the following methods may be used, including but not limited to: first, obtaining the private key share of each participant and combining the private key shares of each participant; then, decrypting the encrypted calculation results based on the combined private key shares to obtain the calculation results of each participant.

[0079] It should be noted that the method provided in the embodiments of the present invention has the same implementation principle and technical effect as the aforementioned system embodiments. For the sake of brevity, any parts not mentioned in the method embodiments can be referred to the corresponding content in the aforementioned system embodiments.

[0080] This invention also provides an electronic device, specifically, the electronic device includes a processor and a storage device; the storage device stores a computer program, and the computer program, when run by the processor, executes the method described in any of the above embodiments.

[0081] Figure 4 The present invention provides a schematic diagram of the structure of an electronic device 100, which includes a processor 40, a memory 41, a bus 42 and a communication interface 43. The processor 40, the communication interface 43 and the memory 41 are connected through the bus 42. The processor 40 is used to execute executable modules, such as computer programs, stored in the memory 41.

[0082] The memory 41 may include high-speed random access memory (RAM) or non-volatile memory, such as at least one disk storage device. Communication between this system network element and at least one other network element is achieved through at least one communication interface 43 (which can be wired or wireless), such as the Internet, wide area network, local area network, metropolitan area network, etc.

[0083] Bus 42 can be an ISA bus, PCI bus, or EISA bus, etc. The bus can be divided into address bus, data bus, control bus, etc. For ease of representation, Figure 4 The symbol is represented by a single double-headed arrow, but this does not mean that there is only one bus or one type of bus.

[0084] The memory 41 is used to store programs. After receiving an execution instruction, the processor 40 executes the program. The method executed by the device for defining the flow process disclosed in any of the foregoing embodiments of the present invention can be applied to the processor 40 or implemented by the processor 40.

[0085] Processor 40 may be an integrated circuit chip with signal processing capabilities. In implementation, each step of the above method can be completed by the integrated logic circuitry in the hardware of processor 40 or by instructions in software form. Processor 40 can be a general-purpose processor, including a Central Processing Unit (CPU), a Network Processor (NP), etc.; it can also be a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), a Field-Programmable Gate Array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components. It can implement or execute the methods, steps, and logic block diagrams disclosed in the embodiments of this invention. The general-purpose processor can be a microprocessor or any conventional processor. The steps of the methods disclosed in the embodiments of this invention can be directly embodied in the execution of a hardware decoding processor, or executed by a combination of hardware and software modules in the decoding processor. The software modules can reside in random access memory, flash memory, read-only memory, programmable read-only memory, electrically erasable programmable memory, registers, or other mature storage media in the art. The storage medium is located in memory 41. The processor 40 reads the information in memory 41 and, in conjunction with its hardware, completes the steps of the above method.

[0086] The computer program product of the readable storage medium provided in the embodiments of the present invention includes a computer-readable storage medium storing program code. The instructions included in the program code can be used to execute the methods described in the foregoing method embodiments. For specific implementation, please refer to the foregoing method embodiments, which will not be repeated here.

[0087] If the aforementioned functions are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this invention, essentially, or the part that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0088] Finally, it should be noted that the above-described embodiments are merely specific implementations of the present invention, used to illustrate the technical solutions of the present invention, and not to limit it. The scope of protection of the present invention is not limited thereto. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that any person skilled in the art can still modify or easily conceive of changes to the technical solutions described in the foregoing embodiments within the technical scope disclosed in the present invention, or make equivalent substitutions for some of the technical features; and these modifications, changes, or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention, and should all be covered within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

1. An EDA design collaboration data security protection system, characterized by, The application relates to an EDA design collaboration data security protection system and an EDA design collaboration method. The system comprises a user layer, an application layer and a cloud platform layer. The user layer sets data access strategies and access permissions of participants through a user interface. The application layer comprises an EDA tool and a data processing module. The EDA tool is used for executing an EDA design task and sending design data of the EDA design task to the data processing module. The data processing module is used for performing data segmentation, data preprocessing, data encryption, data decryption and data reconstruction on the design data and returning processed design data to the EDA tool. The cloud platform layer is used for executing a computing task of the EDA design task based on a secure multi-party computing protocol and sending an encrypted computing result to the data processing module. The EDA design collaboration method based on the EDA design collaboration data security protection system comprises the following steps 1 to 5. Step 1: data segmentation; EDA design data is finely segmented according to functional modules and levels; the functional modules comprise a power module, a signal processing module and a control module; the levels comprise a behavior level, a logic level, a circuit level and a physical level; each functional module and level of data is marked and stored in different encrypted containers through a collaboration platform management UI; Step 2: data distribution and preprocessing; the segmented design data is distributed to corresponding participants, and each participant locally pre-processes the data, including encoding and encryption; Step 3: key generation and distribution; a smart key management system is used to generate a public key and a private key pair through a secure key generation algorithm; the public key is used for encrypting data, and the private key share is distributed to each participant; the private key is distributed to the corresponding participant by using a secure communication protocol SSL and an encryption technology; 2. The system of claim 1, wherein, Step 4: joint calculation; a threshold full homomorphic encryption protocol is used to perform an EDA computing task; Step 5: result verification and data reconstruction; when the encrypted computing result is decrypted, each participant provides a private key share, the private key shares of all participants are combined through an interactive process, after the private key shares are successfully combined, the complete private key is used to decrypt the encrypted data to obtain the original computing result; after the computing results of all participants are obtained, the computing results are verified through a digital signature verification algorithm, after the computing results of all participants are verified, the computing results are integrated to form a complete and consistent EDA design database or file set. The data processing module comprises: a data segmentation component for obtaining design data of the EDA design task and distributing the segmented design data to corresponding participants; a data preprocessing component for preprocessing the segmented design data; a data encryption component for encrypting the preprocessed design data to obtain encrypted data of each participant and transmitting the encrypted data to a cloud platform for performing a computing task based on a communication SSL protocol and receiving encrypted computing results of each participant transmitted by the cloud platform through the communication SSL protocol; a data decryption component for decrypting the encrypted computing results of each participant to obtain the computing results of each participant. The data reconstruction component is configured to verify the calculation results of the participants, and integrate the design data of the participants to obtain a design database after the verification is passed.

3. The system of claim 2, wherein, The data encryption component is specifically configured to: generate a public key and a private key pair based on a preset key generation algorithm; encrypt the preprocessed design data based on the public key to obtain encrypted data of the participants, and distribute shares of the private key to the corresponding participants.

4. The system of claim 2, wherein, The data decryption component is specifically configured to: obtain the private key shares of the participants, and combine the private key shares of the participants; decrypt the encrypted calculation results based on the combined private key shares to obtain the calculation results of the participants.

5. The system of claim 2, wherein, The data reconstruction component is specifically configured to: verify the calculation results of the participants based on a digital signature verification algorithm; if the calculation results of the participants all meet the design requirements, uniformly format and integrate the design data of the participants to obtain a design database.

6. The system of claim 1, wherein, The cloud platform layer includes a cloud computing resource and a security management module; The cloud computing resource is configured to receive and store the encrypted data transmitted by the data processing module, perform joint calculation on the encrypted data of the participants based on a secure multi-party computation protocol to obtain encrypted calculation results of the participants, and transmit the encrypted calculation results to the corresponding participants through a communication SSL protocol; The security management module is configured to manage keys, access control of the participants, and security audit.

7. An EDA design collaboration data security protection method, characterized in that, The EDA design collaboration data security protection system applied to any one of claims 1-6 comprises: obtain design data of an EDA design task, and distribute the design data to the corresponding participants after the design data is segmented; preprocess the segmented design data, and encrypt the preprocessed design data to obtain encrypted data of the participants; perform joint calculation on the encrypted data of the participants based on a secure multi-party computation protocol to obtain encrypted calculation results of the participants; decrypt the encrypted calculation results of the participants to obtain the calculation results of the participants; verify the calculation results of the participants, and integrate the design data of the participants to obtain a design database after the verification is passed.

8. The method of claim 7, wherein, Decrypting the encrypted calculation results of the participants to obtain the calculation results of the participants comprises: obtain the private key shares of the participants, and combine the private key shares of the participants; decrypt the encrypted calculation results based on the combined private key shares to obtain the calculation results of the participants.

9. An electronic device, comprising: The computer program is executed by the processor to perform the steps of the method of any one of claims 7-8.

10. A computer-readable storage medium having stored thereon a computer program, characterized in that The computer program is executed by the processor to perform the steps of the method of any one of claims 7-8.

Images